Preliminary research
HijackKV: New Threat in Position-Independent KV Cache Reuse
AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.
Position-independent KV cache reuse lets a serving system reuse cached key-value state whenever identical text chunks appear, whatever their position. Because a cache entry is retrieved by token match but encodes the context it was computed in, a benign-looking chunk can carry an attacker-controlled prefix, and reusing it in a victim's query steers the model with no adversarial text in the input.
Record
- Researcher
- Yichi Zhang, Zhiqi Wang, Huan Zhang and Yuchen Yang
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Yichi Zhang, Zhiqi Wang, Huan Zhang and Yuchen Yang, first published at the original source. Preserved copies are kept so the citation survives its host.